tocsin

Debian/ikiwiki: unknown

Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.

Action: Upgrade ikiwiki to 2.42 or later.

Affected

introducedfixedlast affected
02.42-

Fixed versions

2.42

Sources

published · modified · JSON